Package org.keycloak.protocol.oid4vc.issuance.keybinding

Interface CNonceHandler

All Superinterfaces:

org.keycloak.provider.Provider

All Known Implementing Classes:

JwtCNonceHandler

public interface CNonceHandler
extends org.keycloak.provider.Provider

Author:

Pascal Knüppel

Method Summary

Modifier and Type	Method	Description
String	buildCNonce(List<String> audiences, Map<String,Object> additionalDetails)	used to build a cNonce in any style.
default void	close()
void	verifyCNonce(String cNonce, List<String> audiences, Map<String,Object> additionalDetails)	must verify the validity of a cNonce value that has been issued by the buildCNonce(List, Map) method.

Method Details

buildCNonce

String buildCNonce(List<String> audiences,
 @Nullable
 Map<String,Object> additionalDetails)

used to build a cNonce in any style. For jwt-based cNonces we will additionally require the audience-values that should be added into the cNonce

Parameters:

audiences - the audiences for jwt-based cNonces

additionalDetails - additional attributes that might be required to build the cNonce and that are handler specific

Returns:

the cNonce in string representation

verifyCNonce

void verifyCNonce(String cNonce,
 List<String> audiences,
 @Nullable
 Map<String,Object> additionalDetails)
           throws org.keycloak.common.VerificationException

must verify the validity of a cNonce value that has been issued by the buildCNonce(List, Map) method.

Parameters:

cNonce - the cNonce to validate

audiences - the expected audiences for jwt-based cNonces

additionalDetails - additional attributes that might be required to build the cNonce and that are handler specific

Throws:

org.keycloak.common.VerificationException

close

default void close()

Specified by:

close in interface org.keycloak.provider.Provider